Daily Digest
The single most urgent item this week is CVE-2024-58385 affecting Microsoft SQL Server (via the Yonyou U8 CRM platform), which presents a critical CVSS of 9.8. This vulnerability is an unauthenticated, remote SQL injection that allows arbitrary operating system command execution on underlying database hosts when `xp_cmdshell` is active, with active exploitation observed in the wild by the Shadowserver Foundation. For PostgreSQL environments, particularly homelabs and enterprise partition management, CVE-2026-61820 (pg_partman, CVSS 8.5) is highly critical, allowing a low-privileged user to escalate to database-wide superuser compromise and OS command execution via crafted column names. Additionally, organizations routing traffic through Warpgate bastion hosts must urgently patch multiple high-severity vulnerabilities, including session recording eavesdropping (CVE-2026-63330, CVSS 7.7) and stored cross-site scripting (CVE-2026-58491, CVSS 9.3), which expose proxied MySQL, PostgreSQL, and SSH credentials.
---
Skip systems with no entries? No, all four systems have formal vulnerability entries. Presenting them sorted as provided in the dataset.
Summary: This is a stored cross-site scripting (XSS) and open redirect vulnerability in the Warpgate bastion host's SSO provider endpoints. An attacker can craft a malicious `next` parameter that, when a victim authenticated user completes the SSO flow, executes arbitrary JavaScript in the victim's browser within the Warpgate origin, stealing session data and allowing administrative actions. This issue is fixed in version 0.25.5.
Affected Features / Interoperability: Affects the SSO provider API endpoints (`/@warpgate/api/sso/providers/:name/start` and `/@warpgate/api/sso/return`) in `warpgate-protocol-http/src/api/sso_provider_list.rs`. Downstream, this compromises the security of any SSH, HTTPS, or MySQL session routed through a Warpgate bastion, potentially leading to full account takeover.
Source:
Actions:
Summary: A missing authorization check in the Warpgate admin API allows any authenticated regular user to subscribe to active session recordings via the WebSocket stream endpoint. By identifying active recording UUIDs, an attacker can stream real-time terminal input and output of proxied SSH, MySQL, or PostgreSQL sessions, leaking sensitive credentials and commands. This issue is fixed in version 0.25.6.
Affected Features / Interoperability: Impacts the `api_get_recording_stream` function in `warpgate-admin/src/api/recordings_detail.rs` and the `/@warpgate/admin/api/recordings/{uuid}/stream` endpoint. Downstream, this breaks the confidentiality of all audit logs and proxied database/SSH sessions managed by the bastion.
Source:
Actions:
Summary: A row-count semantic mismatch between the database driver and Keycloak's application logic in stateless mode allows attackers to bypass replay protection mechanisms. An attacker who intercepts single-use security artifacts (such as JWT assertions or TOTP codes) can replay them to gain unauthorized access to the token endpoint or login flows.
Affected Features / Interoperability: Impacts Keycloak deployments configured in stateless mode utilizing MySQL or MariaDB databases. Downstream, this compromises the entire identity and access management (IAM) infrastructure, potentially leading to account takeover of services relying on Keycloak for authentication.
Source:
Actions:
Summary: An unauthenticated SQL injection vulnerability exists in the `admin/add_table.php` file of the AdithyaYelloju Restaurant Management System. The `table/members/price` argument is manipulated to inject arbitrary SQL queries directly into `mysqli_query` calls, allowing remote database compromise
The most urgent item in today's cloud security digest is CVE-2026-61682 in Kubernetes, a CISA KEV-confirmed vulnerability with a CVSS score of 9.9 (CRITICAL). This flaw allows authenticated tenants to impersonate cluster administrators and bypass authorization controls, enabling cross-workspace resource manipulation, secret theft, and RBAC data exfiltration. Immediate patching to versions 0.31.4 or 0.32.2 is required. Other critical issues include a Google Cloud Gemini SDK RCE vulnerability (CVE-2026-19407) and a Docker Mailu authentication bypass (CVE-2026-85751), both requiring urgent remediation.
Summary: The kcp front-proxy fails to sanitize identity headers (X-Remote-User, X-Remote-Group, etc.) before forwarding requests to shards. Authenticated tenants can inject administrative group memberships (e.g., system:masters) to impersonate cluster admins, bypass authorization, and access/modify resources across workspaces. Exploitation requires authenticated access to the kcp control plane.
Affected Features / Interoperability: kcp control plane proxy, shard authentication, Kubernetes RBAC enforcement, workspace isolation. Impacts multi-tenant Kubernetes deployments using kcp for form-factor abstraction.
Source: https://github.com/kcp-dev/kcp/commit/7437cdcfec8f927d1a9bf1b2dd1e075d038e27ca
Actions:
Summary: The Observability Operator creates ClusterRole-bound ServiceAccounts during Namespace-Scoped MonitorStack deployments. A namespaced-level attacker can create a MonitorStack to escalate privileges to cluster-admin via ServiceAccount impersonation.
Affected Features / Interoperability: OpenShift Observability Operator, ServiceAccount creation, ClusterRole bindings, namespace-scoped custom resources.
Source: https://access.redhat.com/security/cve/CVE-2025-2843
Actions:
Summary: CRI-O checkpoint restore bypasses Kubernetes security contexts. Attackers with pod creation permissions can restore malicious checkpoints retaining elevated capabilities, credentials, or seccomp profiles.
Affected Features / Interoperability: CRI-O container runtime, Kubernetes pod security contexts, OpenShift 4.17+ checkpoint functionality.
Source: https://access.redhat.com/security/cve/CVE-2026-92574
Actions:
Summary: Bucket squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python <1.166.1 allows RCE and tenant-project token theft via malicious bucket name collisions.
Affected Features / Interoperability: Google Cloud Gemini SDK, Python SDK versions prior to 1.166.1, tenant authentication tokens.
Source: https://docs.cloud.google.com/gemini-enterprise-agent-platform/release-notes#March_31_2026
Actions:
Summary: Mailu Docker deployments with PROXY_AUTH_WHITELIST but unset REAL_IP_HEADER trust client-controlled X-Forwarded-By headers, enabling unauthenticated proxy identity spoofing.
Affected Features / Interoperability: Mailu Docker images 2.0-2024.06.54, nginx proxy configuration, authentication bypass.
Source: https://github.com/Mailu/Mailu/releases/tag/2024.06.55
Actions:
Summary: Omni's ImportedClusterSecrets resource exposes Kubernetes/Talos/etcd CA private keys to authenticated Readers during cluster import, enabling certificate forgery and cluster takeover.
Affected Features / Interoperability: Omni cluster import process, Kubernetes CA keys, Talos OS secrets, etcd encryption keys.
Source: https://github.com/siderolabs/omni/releases/tag/v1.6.6
Actions:
Summary: KubeVirt's safepath package allows symlink-based path redirection in virt-handler IPC sockets, enabling VM lifecycle event injection and host filesystem manipulation.
Affected Features / Interoperability: KubeVirt virt-handler, VM lifecycle management, host filesystem access controls.
Source: https://access.redhat.com/errata/RHSA-2026:51031
Actions:
Summary: Capsule's forbidden list validation uses case-insensitive sorting with byte-order binary search, allowing mixed-case keys to bypass namespace/Service restrictions.
Affected Features / Interoperability: Capsule namespace policies, forbidden metadata validation, multi-tenancy controls.
Source: https://github.com/projectcapsule/capsule/releases/tag/v0.13.7
Actions:
Summary: Tinyauth's hostname case-sensitivity mismatch allows authenticated users to bypass app access controls via differently-cased hostnames.
Affected Features / Interoperability: Tinyauth access control service, hostname-based app restrictions, Docker label fallback.
Source: https://github.com/tinyauthapp/tinyauth/releases/tag/v5.1.2
Actions:
Summary: Frigate's /api/go2rtc/api endpoint exposes internal configuration and credentials to viewer users via unauthenticated GET requests.
Affected Features / Interoperability: Frigate NVR API, go2rtc integration, camera credential storage.
Source: https://github.com/blakeblackshear/frigate/releases/tag/v0.18.0
Actions:
Summary: Capsule's ForbiddenAnnotations.Regex validation panics on malformed regex, blocking namespace operations for affected tenants.
Affected Features / Interoperability: Capsule tenant validation webhook, namespace creation/update workflows.
Source: https://github.com/projectcapsule/capsule/releases/tag/v0.13.7
Actions:
Summary: Capsule's hostname regex validation reverses new/old Tenant parameters, allowing malformed AllowedHostnames.Regex to block Ingress operations.
Affected Features / Interoperability: Capsule Ingress validation, hostname regex processing, tenant update workflows.
Source: https://github.com/projectcapsule/capsule/releases/tag/v0.13.7
Actions:
Summary: Warpgate HTTP API tokens bypass IP range restrictions, enabling unauthorized access from prohibited networks.
Affected Features / Interoperability: Warpgate HTTP token authentication, allowed_ip_ranges enforcement, SSH/HTTPS proxy paths.
Source: https://github.com/warp-tech/warpgate/releases/tag/v0.27.3
Actions:
Summary: OpenShift docker-build container mounts /var/lib/kubelet/config.json (containing image pull secrets) as non-read-only hostPath, enabling secret overwrite and DoS.
Affected Features / Interoperability: OpenShift build process, kubelet credentials, image pull secrets, node availability.
Source: https://access.redhat.com/errata/RHSA-2025:10270
Actions:
Summary: draw.io OAuth callback skips state token validation in non-GAE deployments, enabling session hijacking via attacker-controlled authorization codes.
Affected Features / Interoperability: draw.io OAuth integration, Google Drive/OneDrive/GitHub/Dropbox connectors, session management.
Source: https://github.com/jgraph/drawio/releases/tag/v30.2.7
Actions:
Summary: Thinkst Canary Redis service allows unauthenticated DoS attacks via Redis commands.
Affected Features / Interoperability: Thinkst Canary Redis honeypot service, denial-of-service protection.
Source: https://canary.tools/security-advisories/tc-2026-01.txt
Actions:
Summary: rclone serve docker volume plugin allows path traversal via volume names with `..` components, enabling arbitrary filesystem mounts.
Affected Features / Interoperability: rclone Docker volume plugin, volume mount path validation, privileged plugin process.
Source: https://github.com/rclone/rclone/security/advisories/GHSA-p6vx-hf7p-98j6
Actions: